A BootstrapPolicy is held internally to a SecureConversationToken
While a BootstrapPolicy element DOES contain an internal Policy, this
token is NOT considered a PolicyContainingAssertion for the purpose of
calculating things like normalized policies and vocabulary.